Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec8a0c2a-ea8a-38fb-bd8d-f5411f3beccd.roa
File: ec8a0c2a-ea8a-38fb-bd8d-f5411f3beccd.roa (raw, json)
Hash identifier: ugXC5NOKRXieeSOALnyTrP9UuZ1+AYQo8uYiD8/ppRQ=
Subject key identifier: 17:1A:69:10:E8:1E:8C:EC:FC:FF:68:5A:70:93:F5:E8:F2:89:D0:87
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B7352BDD08E55A5A76C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec8a0c2a-ea8a-38fb-bd8d-f5411f3beccd.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.161.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:73:52:bd:d0:8e:55:a5:a7:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b786b72d-84be-45e5-882c-78d4e0ef1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:4a:7c:a5:e9:22:58:87:76:00:88:49:21:
ab:a3:05:d5:80:b2:3e:b3:e4:ae:eb:68:58:e2:72:
ca:72:b0:f6:00:97:ca:bb:2f:c6:12:40:78:5e:79:
25:81:b8:65:c0:a7:3c:a2:a2:24:e5:fd:c4:e3:42:
6d:5d:62:05:8b:44:2b:4c:fe:8d:8e:cf:79:70:46:
4e:d7:ca:ed:1d:84:24:f2:48:1c:7a:4d:65:39:a7:
d2:7c:08:19:1b:98:28:f8:db:d8:db:7c:95:a4:99:
80:c3:b4:1c:88:49:bd:45:a0:c4:92:94:fd:e4:33:
03:7d:5e:71:77:c1:14:4e:0f:92:d3:1c:aa:7b:eb:
af:da:f7:e6:75:07:14:f6:bc:cc:c8:cb:32:1b:b5:
04:a8:59:d2:da:bc:6c:bc:6f:ad:3e:43:15:c0:09:
f7:66:e0:dc:30:b5:c5:e9:12:2f:8e:d7:43:fc:e5:
93:4d:0f:9e:8a:de:e3:98:c5:d7:3f:a1:f9:60:fc:
10:04:da:0d:c8:d6:39:e1:8e:ae:8b:6c:43:fc:29:
28:d8:e5:86:ef:2e:d6:07:0a:a5:a6:12:1b:f4:9a:
97:8a:3a:94:fe:63:87:bb:53:f5:cb:c1:f6:b9:97:
28:c3:a6:73:57:92:62:9b:74:cc:e7:f4:24:b3:2b:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1A:69:10:E8:1E:8C:EC:FC:FF:68:5A:70:93:F5:E8:F2:89:D0:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec8a0c2a-ea8a-38fb-bd8d-f5411f3beccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.161.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:14:4e:81:bc:f4:56:4a:d8:e5:d7:78:60:89:19:77:86:09:
3c:61:3c:72:2d:d1:58:93:f9:ec:cd:78:a0:d2:5b:6b:3e:f5:
6d:7b:bc:44:93:48:bc:82:53:38:c4:9e:b7:06:98:ac:65:41:
77:68:27:54:c1:96:15:2c:50:8a:c3:93:74:ae:c7:00:fd:d3:
4d:79:0d:fa:8f:ec:87:c2:a7:b9:cf:55:19:a0:e3:55:b9:96:
3f:f6:63:a6:2a:8d:5a:1f:29:5e:dc:75:a0:d2:6a:61:7b:04:
cc:b6:7b:f4:80:1f:af:61:3d:cd:70:0a:f3:e8:76:12:cd:a9:
cb:81:fa:ab:f7:c5:5d:2d:b4:62:68:0f:61:da:48:2d:c9:ee:
30:11:fa:52:34:58:55:d5:cc:95:9d:86:0a:62:6f:d3:c1:e5:
f8:b3:44:64:97:fb:e7:af:10:89:d0:a3:c4:b0:8b:51:8b:03:
96:15:0a:11:98:37:45:29:af:5f:2a:95:14:06:78:1a:47:53:
2f:8c:84:2b:ce:49:90:a7:9a:15:fc:a0:08:8e:9c:22:38:35:
80:31:a8:9c:b5:22:7c:df:18:3c:d4:fc:f9:35:2c:4c:a3:9d:
80:9f:7a:12:4c:74:6c:c3:01:36:63:8c:d1:10:2b:64:7b:a4:
af:cf:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:48:49 2025 by rpki-client